CVE-2025-48799

Описание Это PoC для CVE-2025-48799 — уязвимости повышения привилегий в службе обновления Windows. Данная уязвимость затрагивает клиенты Windows win11/win10 с как минимум двумя жесткими дисками. Когда на машине несколько жестких дисков, можно изменить место сохранения нового контента с помощью...

CVE-2025-30567

Introduction Téléchargement arbitraire non autorisé de fichier dans WordPress WP01 ! Configuration de l'environnement Étape 1 : Télécharger le plugin WP01, mais... Haha, ne vous inquiétez pas, voici le code source du plugin. Étape 2 : Compressez le dossier wp01 fourni et téléchargez-le dans la...

CVE-2024-23692

POC - Неаутентифицированная RCE-уязвимость в Rejetto HTTP File Server - CVE-2024-23692 Обзор POC - Неаутентифицированная RCE-уязвимость в Rejetto HTTP File Server - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 — это критическая уязвимость в Rejetto HTTP File Server HFS версии 2.3m,...

Vite-CVE-2025-30208-EXP

Инструмент обнаружения CVE-2025-30208 Анализ уязвимости CVE-2025-30208 — это уязвимость произвольного чтения файлов в dev-сервере Vite. Злоумышленник может прочитать чувствительные файлы сервера например, /etc/passwd или C:\windows\win.ini, сформировав специальный путь например, с префиксом @fs...

CVE-2020-37278

The Weaver e-Bridge platform is vulnerable to an unauthenticated arbitrary file read vulnerability. This flaw exists in the saveYZJFile endpoint, where a remote attacker can supply a file: URL to the downloadUrl parameter to access arbitrary files on the host system. Successful exploitation allow...

CVE-2020-37278 Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

EUVD-2020-31274

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

CVE-2020-37278 Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 ImageMagick Lecture de fichier arbitraire - Preuve de concept d'exploit Vidéo 📼 https://youtu.be/quKxwNAMBIA Utilisation 🛠 Empoisonner l'image ☣️ python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png Télécharger...

WooRefer

WooRefer | CVE-2022-4047 - Retour Remboursement et Échange pour WooCommerce Outil automatique de masse pour vérifier et exploiter la vulnérabilité CVE-2022-4047 - Retour Remboursement et Échange pour WooCommerce install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...

EUVD-2014-9822

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

CVE-2014-125130

The CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress affects versions through 1.0.11 . It contains an unauthenticated arbitrary file read vulnerability caused by a path-traversal flaw in the file parameter of direct_download.php. Remote attackers can exploit this to ...

CVE-2019-9766

CVE-2019-9766 Exploitant la vulnérabilité de débordement de tampon présente dans Free MP3 CD Ripper version 2.6, un fichier MP3 spécialement conçu permet à un attaquant d'exécuter du code arbitraire via le débordement de tampon lorsque la victime lit le fichier audio appât avec le lecteur...

CVE-2023-54405

The H3C CVM (Cloud Virtualization Management) component of the H3C CAS cloud platform is vulnerable to an unauthenticated arbitrary file upload flaw in the /cas/fileUpload/upload endpoint. The root cause is the lack of path traversal restrictions and file type validation when handling the caller-...

EUVD-2023-60704

H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter...

cve-2026-62737-lab

CVE-2026-62737: от падения до SYSTEM в лабораторных условиях Продолжение оригинального разбора CVE-2026-62737 произвольный косвенный вызов ядра в ExecutionContext.sys. Оно превращает PoC, вызывающий падение, в рабочую цепочку подмены токена, которая запускает cmd.exe от имени SYSTEM, но только в...

CVE-2024-50510

CVE-2024-50510 AR For Woocommerce = 6.2 — неаутентифицированная произвольная загрузка файлов Описание Плагин AR for WooCommerce для WordPress уязвим к произвольной загрузке файлов из-за отсутствия проверки типа файлов во всех версиях до 6.2 включительно. Это позволяет неаутентифицированным...

CVE-2022-0952

CVE-2022-0952 Sitemap by click5 1.0.36 - Mise à jour non authentifiée d'options arbitraires Description Le plugin ne dispose pas de vérifications d'autorisation et de CSRF lors de la mise à jour d'options via un point de terminaison REST, et ne garantit pas que l'option à mettre à jour appartient...

CVE-2026-19856

The All in One SEO WordPress plugin versions prior to 5.0.2.1 contains a vulnerability where it fails to correctly identify which shortcodes are present in content derived from user input before stripping them. This flaw allows unauthenticated users to execute arbitrary shortcodes registered on t...

EUVD-2026-91769

The All in One SEO WordPress plugin before 5.0.2.1 does not correctly determine which shortcodes are present in content derived from user input before deciding which ones to strip, allowing unauthenticated users to execute arbitrary shortcodes registered on the site. On sites upgraded from older...